Kind of. Yes you really should make an Art.17 request to ensure having a strong GDPR case in the event of non-compliance, but technically there is still an Art.5 data minimization rule that applies to data that is no longer needed for performance of the contract.
There are several reasons why the data should still be kept even with art. 5, if for whatever reason legal entities need to contact you for something that you posted long ago that was archived somewhere else, reddit must keep your contact info, albeit just that, in the spirit of art. 5.
Now, if they are allowed to use that contact info to send you promotional content? I don’t think so. Furthermore, this mal has been sent to accounts that had more than X comment karma, and having that info stored still would breach the data minimozation clause, so idk. I wouldn’t try to sue them in these grounds though.
Kind of. Yes you really should make an Art.17 request to ensure having a strong GDPR case in the event of non-compliance, but technically there is still an Art.5 data minimization rule that applies to data that is no longer needed for performance of the contract.
There are several reasons why the data should still be kept even with art. 5, if for whatever reason legal entities need to contact you for something that you posted long ago that was archived somewhere else, reddit must keep your contact info, albeit just that, in the spirit of art. 5.
Now, if they are allowed to use that contact info to send you promotional content? I don’t think so. Furthermore, this mal has been sent to accounts that had more than X comment karma, and having that info stored still would breach the data minimozation clause, so idk. I wouldn’t try to sue them in these grounds though.